debug cryptoapicert signature

The inlcuded exe could be run from any folder if openssl 1.1 dlls are in the PATH (2.4.5 distribution includes them but may or may not be added to the PATH). Or copy to the folder where 2.4.5 is installed (say C:\Program Files\OpenVPN\bin).

Run from command line with --log cng-debug.log --config config-name.ovpn

The signature, the decrypted hash with and without padding are written to the logs. Here is an example o/p (none of this is sensitive info). Please report results to [email protected]. Thanks

Fri Apr xx yy:19:52 2018 us=135927 Signing hash using CNG: data size = 83
>RSA_SIGN: 3051300d0609608648016503040203050004403494ab7feaa14ff410a89ebe64d7d4de54565cf46368e404f6955ad7f493ef7fec0ae698921fd90bfbacce441815fb1ad084a6ecd9d3f94c113bf57a953c87b3
rsa-sig
a22adc6b2130fe53d6acc359cb49f4ef88f8952d745aa35273bcdc12719b655b879fe0bab7dae114
cd3dbc7c529bbf9bbc7ddcceb7b1ec1f46447949ecf41cfecb138895166b3b82efae5f4de9d83316
f5fbc6dfbd82cda103e0d83288463d5672635d635939c441f6e911cd0a2c6755aea17f2ec70bf768
24f0203c4531b9f68c987b1bd349af2b53eb83f8f577d62eabb5945b335b642d77df6e6d61c1646b
d9b342b5deb860ca2c497fde941e38bdf3004f84077128bdbadbc7c07420b70a1afcde630dfd2573
d5bf606ee43fc9c808f24c762e605188fb6f11c9f13d34d2bfb1e1bf1981933ef6d8327800037ff8
f8d5107affa2c969d25b39d368ede5e5
END
sig-verify-padded
0001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff
ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff
ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff
ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff
ffffffffffffffffffffffff003051300d0609608648016503040203050004403494ab7feaa14ff4
10a89ebe64d7d4de54565cf46368e404f6955ad7f493ef7fec0ae698921fd90bfbacce441815fb1a
d084a6ecd9d3f94c113bf57a953c87b3
END
sig-verify
3051300d0609608648016503040203050004403494ab7feaa14ff410a89ebe64d7d4de54565cf463
68e404f6955ad7f493ef7fec0ae698921fd90bfbacce441815fb1ad084a6ecd9d3f94c113bf57a95
3c87b3
END
Fri Apr xx yy:19:52 2018 us=145927 Signature returned by CAPI/CNG is valid